Critical severity9.1NVD Advisory· Published Feb 26, 2024· Updated Apr 15, 2026

CVE-2024-27455

Description

In the Bentley ALIM Web application, certain configuration settings can cause exposure of a user's ALIM session token when the user attempts to download files. This is fixed in Assetwise ALIM Web 23.00.04.04 and Assetwise Information Integrity Server 23.00.02.03.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Bentley/Assetwise ALIM Webllm-create
Range: <= 23.00.04.04
Bentley/Assetwise Information Integrity Serverllm-create
Range: <= 23.00.02.03

Patches

Vulnerability mechanics

References

www.bentley.com/advisories/be-2024-0001/nvd

News mentions

No linked articles in our index yet.

cvss	0.591
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000